TNC 2006, Catania TERENA Server Certificate Service SCS Towards the large-scale use of affordable popup-free server certificates for the European NRENs.

Similar presentations

Presentation on theme: "TNC 2006, Catania TERENA Server Certificate Service SCS Towards the large-scale use of affordable popup-free server certificates for the European NRENs."— Presentation transcript:

1
TNC 2006, Catania TERENA Server Certificate Service SCS Towards the large-scale use of affordable popup-free server certificates for the European NRENs Licia Florio, John Dyer TERENA & members of the community

3
TNC 2006, Catania The background European NREN PKIs around for many years - But still not widely deployed Anticipated growth in need: -AAI middleware services -Grids - Web-based ‘stuff’ (mail, e-learning, webservices etc.) - VPN, -eduroam Only major use outside Grids is for Servers

5
TNC 2006, Catania Problem #2 Authorized CAs are known to the browsers Accreditation of a CA is very expensive Certificates are relatively expensive when bought in large numbers on a per certificate cost Our Community needs a cost effective way to obtain large numbers of server certificates

6
TNC 2006, Catania Finding a community solution TF-EMC2 discussions started in 2004 First (draft) proposal in October 2004: Interest expressed by a number of NRENs Call for Proposals issued by TERENA in August 2005; Offers from commercial CAs received in September 2005, preferred supplier (GlobalSign) announced on 19 December 2005, contract signed on 9 January 2006

9
TNC 2006, Catania The Basics Each participating NREN has nominated RA Administrators These people have been trained at GlobalSign on how to administer the process They are the contact point between the Server SysAdmins and GlobalSign They are responsible for maintaining the integrity of the identification process They can requested unlimited number of certificates during the 1 year pilot

18
TNC 2006, Catania Acknowledgements So many people in the community Some around the table, others not Licia, Karel These slides were based on material from Licia Florio of TERENA and Kasper Brand of SWITCH – Sorry for any liberties I have taken with their material

19
TNC 2006, Catania In Licia’s words:

20
TNC 2006, Catania “We got a cool service”

21
TNC 2006, Catania Joining the TERENA SCS Initial Pilot runs for one year After June 06 we can open to service to new NRENs Some NRENs are already waiting There is fee to pay to join If the pilot is successful, we will expand again